Top Questions

46 votes
3 answers
7k views

Polynomial-time Quantum Algorithms for Lattice Problems

5 votes
4 answers
579 views

What is the meaning of asymptotic security proofs in practice?

3 votes
1 answer
1k views

When incrementing a private key by 1, by how much is the public key Incremented?

2 votes
2 answers
127 views

Key Exhaustion Risks in Symmetric and Asymmetric Cryptography

0 votes
0 answers
186 views

Is the cryptography scheme over lattice still secure? [duplicate]

0 votes
1 answer
93 views
+100

Row level database encryption scheme

2 votes
1 answer
119 views

How do I generate a sequence of numbers with unpredictable differences

1 vote
1 answer
75 views

GKR Protocol - does it matter which gate in each layer the SumCheck Protocol is run on?

1 vote
2 answers
45 views

Is this procedural code correct description of `g is a primitive root module of p`?

1 vote
1 answer
67 views

Is it possible to use Diffie-Hellman protocol for symmetric group?

1 vote
1 answer
72 views

Why is perfect secrecy defined under a ciphertext-only threat model?

1 vote
0 answers
82 views

Need help with Cryptohack's ProSign 3 ECDSA problem [closed]

2 votes
1 answer
55 views

Quantum many time pad

1 vote
1 answer
66 views

Why is zero knowledge defined via simulation w.r.t. inputs *in* the language?

0 votes
1 answer
39 views

CVE-2024-31497, nonces and random numbers: Can someone explain, please?

0 votes
1 answer
48 views

How to use smt solvers in order to restrict the possible key search where a portion of the private key and a portion of the public key hash is known?

0 votes
1 answer
54 views

New Service to Service Protocol Presented for Public Scrutiny (Time-based Token Signing), Is it Safe?

0 votes
0 answers
53 views

Difficulty of factoring large semiprime N if given a second value y = (p-1)*r, where r is a random large prime?

2 votes
1 answer
53 views

Proving DES complementation property: y = DES(k,x) ⟹ /y = DES(/k, /x)

1 vote
0 answers
52 views

Do one-way functions imply target collision resistance?

1 vote
0 answers
51 views

Zero knowledge proof of a linear expression in the exponent [closed]

0 votes
1 answer
36 views

How to compute $r \cdot (a+b+c)$ for random $r$ and secret value$a,b,c$ in MPC?

0 votes
0 answers
44 views

Keccak implementation confusion

2 votes
0 answers
42 views

How does the Functionality know whether a sender/receiver is malicious?

0 votes
0 answers
37 views

Proving Insecure Hash Function Through Not Collision Resistant

0 votes
0 answers
35 views

How to attack the shuffling of correlated numbers?

0 votes
0 answers
34 views

Reaching the bound of Boneh and Durfee Attack

0 votes
1 answer
34 views

How can LCG based stream ciphers be broken?

0 votes
0 answers
33 views

Inquiry about the Suitability of Lyapunov Exponents for Image Cryptography [closed]

0 votes
0 answers
33 views

Don Reble's eliptic curve semiprime [closed]

1 vote
0 answers
32 views

Should not we eliminate $\pm 1$ from $\mathbb{Z}^\times_N$ in RSA accumulators?

0 votes
0 answers
31 views

Large semiprime factorization [closed]

0 votes
0 answers
30 views

1-0 padding, padded messages of some other message m′according to this padding scheme? [closed]

0 votes
0 answers
30 views

Key recovery attack on BIP32-Ed25519

0 votes
0 answers
28 views

I want to find the Zero Value Points on SECP256R1 curve... Is there an alternative to Chien's method of finding roots over large Finite Fields?

-1 votes
0 answers
25 views

Padding oracle attack with known padding length

0 votes
0 answers
25 views

User-friendly tutorial In JohnTheRipper (JtR) for beginners? [closed]

0 votes
0 answers
24 views

How to implement a SKE scheme supporting single-message multi-ciphertext using LowMC and GMW?

1 vote
0 answers
22 views

Proof of UOWHF construction from a strongly universal hash family

0 votes
1 answer
22 views

NIST Keccak test vectors confusion

0 votes
1 answer
21 views

ZK is not preserved under parallel composition! - Witness Indistinguishability

1 vote
1 answer
15 views

Putty PPK Encryption Questions (or AES-CBC)

0 votes
0 answers
19 views

Enigma machine Rejewski cataluge and ring settings

0 votes
0 answers
18 views

Is there any bijective obfuscation scheme which maintains a byte order (e.g. sorted) or does so after not too many trials? (for 128bit = 16 byte)

0 votes
1 answer
17 views

hmac on a public key verfied data: how secure it is?

1 vote
0 answers
17 views

How Helpful is NXP's LRP Encryption Protocol vs AES for short keys?

0 votes
0 answers
16 views

Reduction For MAC systems


Looking for more? Browse the complete list of questions, or popular tags. Help us answer unanswered questions.